Red Hat CVEs
2,568 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-11792389-ds-base: 389-ds-base: heap buffer overflow in audit log password masking (create_masked_entry_string)
- CVE-2026-11793389-ds-base: 389-ds-base: stack buffer overflow in checkprefix() algorithm id parsing
- CVE-2026-11790389-ds-base: 389-ds-base: pbkdf2 password storage plugin unbounded iteration count denial of service
- CVE-2026-11789389-ds-base: 389-ds-base: smd5 password storage plugin salt length integer underflow crash
- CVE-2026-11788389-ds-base: 389-ds-base: null pointer dereference in deref control plugin ber parser
- CVE-2026-11787389-ds-base: 389-ds-base: heap buffer over-read in ldap_utf8prev() via str2simple filter parsing
- CVE-2026-11785389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handler
- CVE-2026-11786389-ds-base: 389-ds-base: heap out-of-bounds read in ldif parser str2entry_state_information_from_type()
- CVE-2026-52902Awxkit: path traversal via yaml !include directive
- CVE-2026-11611389-ds-base: 389-ds-base: content sync plugin unbounded queue growth and race conditions
- CVE-2026-11569Quay: quay: stored xss via filedrop svg upload
- CVE-2026-3238Samba: denial of service against ad dc wins server
- CVE-2026-50263Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()
- CVE-2026-50262Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributes
- CVE-2026-50264Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformat
- CVE-2026-50261Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()
- CVE-2026-50260Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()
- CVE-2026-50258Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levels
- CVE-2026-50259Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexing
- CVE-2026-50256Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length…
- CVE-2026-50257Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()
- CVE-2026-11332Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
- CVE-2026-9088Keycloak: keycloak: information disclosure due to user profile permission bypass
- CVE-2026-10843Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws
- CVE-2026-10840Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources
- CVE-2026-10805Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend
- CVE-2026-1784Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
- CVE-2026-5419Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal
- CVE-2026-43958Rrdtool: rrdtool: stack buffer overflow allows local code execution or denial of service
- CVE-2026-10118Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication